Default values are set in files like config/values/00-values.yml

Property	Description	Required	Default value	Example
add_metrics_server_components	Deploy metrics server for clusters that do not include them by default	No	false
allow_prometheus_metrics_access	Allows any Prometheus server scrape access to metrics endpoints	No	false
app_domains	list of app domains	Yes	no value	[“apps.cf.example.com”]
app_registry.hostname	Image registry hostname	Yes	no value	https://index.docker.io/v1/
app_registry.password	Image registry password	Yes	no value	Foobrizzle
app_registry.repository_prefix	Image registry repository prefix	Yes	no value	my-org
app_registry.username	Image registry username	Yes	no value	Wingdang
blobstore.secret_access_key	Blobstore secret access key	Yes	no value	Potrzebie
capi.cc_username_lookup_client_secret	CF API client secret	Yes	no value	o/L4Zsu6ZAgw4+Qj
capi.cf_api_controllers_client_secret	API controller client secret	Yes	no value	q/3PZsu6ZAgw4+Qj
capi.cf_api_backup_metadata_generator_client_secret	Backup metadata utility client secret	Yes	no value	q/3PZsu6ZAgw4+Qj
capi.database.adapter	database adapter for use by capi	No	postgres	postgres
capi.database.ca_cert	authority of the certificate used for tls connections to the database	No	no value
capi.database.encryption_key	key used to encrypt database records at rest	Yes	no value	YqEgP7KxSjUmQTSX9drTkQLye8wrqrP4
capi.database.host	address of the database	No	no value	my-postgres.cf.example.com
capi.database.name	name of the capi database	No	cloud_controller	ccdb
capi.database.password	password for the capi database user in plaintext	Yes	no value	d8sQaD9yFWEvBADQE9yFBAt4s5843e6P
capi.database.port	port on which to make database communication	No	5432	3306
capi.database.user	database user for capi tables	No	cloud_controller	capi-db-user
cf_admin_password	password for admin user in plain text	Yes	no value	2fK2zLXPgvmsESrB87sADZQvdLeY5Kv4
cf_db.admin_password	password for administering the internal database	Not if using external database	no value	FQq3dPd6DAoLIMIr
enable_automount_service_account_token		No	false	On most IaaSes should be same as use_first_party_jwt_tokens
gateway.https_only	When true, automatically upgrades incoming HTTP connections to HTTPS gateway	No	true	false
load_balancer.enable	Enable IaaS provisioned load balancer	No	true	false
load_balancer.static_ip	reserved static ip for LoadBalancer	No	dynamically assigned	“192.168.0.0”
metrics_server_prefer_internal_kubelet_address		No	false
remove_resource_requirements	Remove resource requirements for use on smaller environments	No	false
system_certificate.ca	CA certificate used to sign the system certifcate	No	no value
system_certificate.crt	Certificate for the wildcard - subdomain of the system domain	Yes	no value	CN=*.system.cf.example.com
system_certificate.key	Private key for the system certificate	Yes	no value
system_domain	your system domain	Yes	no value	system.cf.example.com
uaa.admin_client_secret	Admin client secret for UAA	Yes	no value	44Ae8Oc90lap7VxO
uaa.database.adapter	database adapter for use by uaa	No	postgresql	mysql
uaa.database.ca_cert	authority of the certificate used for tls connections to the database	No	no value
uaa.database.host	address of the database	No	no value	my-postgres.cf.example.com
uaa.database.name	name of the uaa database	No	uaa	uaa-db
uaa.database.password	password for the uaa database user in plaintext	Yes	no value	d8sQaD9yFWEvBADQE9yFBAt4s5843e6P
uaa.database.port	port on which to make database communication	No	5432	3306
uaa.database.user	database user for uaa tables	No	uaa	uaa-db-user
uaa.encryption_key.passphrase	passphrase for UAA encryption key	Yes	no value	oMPQAK3stj+CeG0F
uaa.jwt_policy.signing_key	JWT policy configuration signing key	Yes	no value	9CsV45r5NFe0z8mC
uaa.login.service_provider.certificate	certificate for UAA’s SAML provider	Yes	no value	plD9e2dUSbXISO6H
uaa.login.service_provider.key	key for UAA’s SAML provider	Yes	no value	qcXZEcKlrG/8mCfH
uaa.login_secret	secret for an external login server to authenticate to UAA	Yes	no value	xrEL+uJ4eb8duBms
use_external_dns_for_wildcard	Enable external-dns integration on the system ingress Service	No	false
use_first_party_jwt_tokens	Patch istio to use first party jwt tokens	No	false	On most IaaSes should be same as enable_automount_service_account_token
workloads_certificate.ca	CA certificate used to sign the workloads certifcate	No	no value
workloads_certificate.crt	Certificate for the wildcard - subdomain of the system domain	Yes	no value	CN=*.apps.cf.example.com
workloads_certificate.key	Private key for the workloads certificate	Yes	no value

---